That is not how oAuth works.

That's the point: this isn't OAuth. It's just a way to phish the code.

	▲	gethly 8 days ago \| parent [-]
		If it is not oAuth, where does Microsoft come from then?